An extension that fails its own build if it can reach the internet.
AS BUILT · EDITOR EXTENSION · SETHER FOR VS CODE · 0.1.0
General notes
- 01Rule one: zero network. A script fails the package if the bundle can make a request at all. Trust you can check, not trust you are asked for.
- 02Rule two: precision over recall in an editor. Name and high-entropy detection ship switched off. A false squiggle costs more trust than a missed one.
- 03Rule three: the mapping from real values to decoys lives in memory for the session, and nowhere else.
Schedule of detector packsDefaults as shipped
| Pack | Catches | Default |
|---|---|---|
| Basic | Email · phone · card · SSN · IBAN | on |
| Secrets | Vendor API keys · JWTs · labelled passwords | on |
| Credentials | DB URIs with passwords · PEM keys | on |
| Identity | Labelled names · DOB · addresses | off |
| High entropy | Long random strings, no known prefix | off |
As posted
This week I built an editor extension whose most important feature is a test that fails if it can reach the internet.
It flags emails, phone numbers, card numbers and API keys in the files you have open. It scrubs them before you paste a log into a chat window, and puts the originals back when the answer comes home. Useful, but not the point.
The point is the three rules written down before the first line of code.
One. Zero network. A script runs against the built bundle and fails the package if anything in it can make a request. Trust you can check beats trust you are asked for.
Two. Precision over recall. In a backend, missing a real value is the expensive mistake. In an editor, a false squiggle costs more trust than a missed one. So name detection and high-entropy detection ship switched off. You turn them on when you want them.
Three. The mapping between real values and decoys lives in memory for the session, and nowhere else. Close the window and it is gone.
It is built and tested. It publishes the moment the marketplace account clears. Until then, sheet 009 is the record of what it is and what it refuses to do.
If you have ever pasted a log into a chat and then gone very quiet, this one was built for that moment.